
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45732.roa
File: AS45732.roa (raw, json)
Hash identifier: g00duqJWnnJicVFok9+hUyM2jkmmtmAu0yPaLFyZTOo=
Subject key identifier: C9:97:77:95:A3:AC:61:9D:F6:8F:A7:51:78:1D:A2:41:9C:7A:96:52
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0764D785807DBECD31BEAD179FD2B40140E8422F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45732.roa
Signing time: Mon 16 Feb 2026 11:00:00 +0000
ROA not before: Mon 16 Feb 2026 10:55:00 +0000
ROA not after: Mon 15 Feb 2027 11:00:00 +0000
asID: 45732
IP address blocks: 103.165.248.0/24 maxlen: 24
103.196.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:64:d7:85:80:7d:be:cd:31:be:ad:17:9f:d2:b4:01:40:e8:42:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 16 10:55:00 2026 GMT
Not After : Feb 15 11:00:00 2027 GMT
Subject: CN=C9977795A3AC619DF68FA751781DA2419C7A9652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:a4:ab:bb:5a:cc:18:58:77:6d:86:12:64:
23:e9:2a:93:8c:c7:dc:ee:16:80:b4:4c:10:1e:a8:
db:53:2c:81:82:71:e0:90:b6:5d:45:bb:04:ca:f2:
a7:e6:b1:c9:20:1f:51:70:14:da:96:ea:ce:3f:77:
04:c1:11:47:9c:19:38:c1:24:42:23:18:09:42:7d:
35:f0:a4:d9:d5:c8:bd:d2:12:4b:97:e7:2f:08:7f:
ca:55:fe:c8:76:dd:85:d5:d3:cb:be:4b:94:b9:9f:
c5:39:5b:ed:82:4c:5f:eb:6f:74:1a:0b:1c:2e:75:
0d:88:de:0c:b4:f6:e1:b8:93:52:88:d0:4b:2a:f8:
48:18:be:f5:26:33:8f:ae:94:ce:31:24:22:a3:5d:
76:58:89:dc:61:a0:19:77:b9:20:97:7f:e2:69:c0:
52:c9:98:79:44:d2:00:7f:f2:c7:3d:fe:ce:e6:cf:
9f:f5:6a:8a:c4:eb:b0:40:97:fa:49:ec:85:ab:81:
a0:f4:60:bc:f9:70:96:4a:ed:c9:17:18:c4:e8:b0:
cd:9d:32:af:13:38:61:6e:5d:f0:92:5f:ae:91:b3:
37:f2:81:e9:9f:47:f4:56:c5:0f:09:e8:1c:08:73:
3c:31:27:31:43:e6:63:5e:6c:92:d7:de:0b:52:e2:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:77:95:A3:AC:61:9D:F6:8F:A7:51:78:1D:A2:41:9C:7A:96:52
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.248.0/24
103.196.166.0/23
Signature Algorithm: sha256WithRSAEncryption
63:9c:8e:20:a4:7c:b0:ff:0e:5e:cf:c5:c3:d0:5c:55:c2:04:
e2:1b:a4:15:63:c2:3a:27:42:dc:1d:bb:f5:61:1c:ce:ff:e7:
d0:70:73:ec:69:33:a0:a2:3c:56:c1:83:a4:1d:d2:06:da:49:
8c:8a:17:c0:86:68:ae:30:b9:6d:10:93:85:b2:5b:40:33:d1:
99:23:28:44:5d:6c:d4:86:81:4d:bc:98:ed:ce:01:fb:f5:00:
92:71:5b:a1:f6:fc:57:e8:22:f2:59:29:ff:89:06:89:7f:78:
58:af:7c:5d:d7:80:1f:84:91:c8:df:ef:f7:a6:3c:57:e7:4b:
70:51:3f:d0:9e:7e:ed:bb:12:07:2e:62:14:ac:a5:8a:04:ec:
25:3e:b6:76:1f:c8:67:00:ab:4f:fb:03:29:55:c8:36:19:69:
b5:6f:80:7d:38:a2:90:13:bf:91:13:68:49:bd:18:40:4b:6f:
67:2b:24:76:21:b5:b3:37:1a:c2:ab:ad:13:18:80:67:29:3f:
ab:90:cc:3b:07:6c:e2:3b:db:7f:90:7e:ac:46:37:b9:e7:64:
2e:c8:b8:43:22:0d:12:24:2c:43:58:cd:4d:29:27:31:23:9f:
ed:1f:0b:d0:82:47:8a:2f:ce:3d:c0:c2:9f:7d:7d:d7:c6:e2:
09:20:de:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:24:01 2026 by rpki-client